Title: #675: [4.5, master] Fix PKCS11 helper
In 50% cases DNSSEC works for me :-). Ready for review.
(The issue was unrelated to PKCS11, I had somehow broken machine probably)
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code